$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa File: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json) Hash identifier: 3W8M4+L5UcrF4X61g7YvE8h6NXq6Cnsx5MRH3y6Aeuw= Subject key identifier: CC:37:95:C5:F1:19:22:FA:62:85:62:3F:8D:7B:9A:43:CD:7D:42:E0 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584919418D8CB8B315D42CAFB950 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 30158 IP address blocks: 199.189.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8d:8c:b8:b3:15:d4:2c:af:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=05a71c4e-6393-435d-a2b4-12f5fe74a26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:93:bc:04:ec:32:1a:f2:46:15:e3:69:08: fe:e1:f8:ce:97:7c:6b:bc:f1:1e:ce:ca:fc:d2:38: 5b:ec:fc:39:a0:04:56:71:ee:bc:59:f5:7c:14:c9: d3:4e:2f:fd:f3:52:8f:96:d9:91:d9:18:94:df:fc: 4d:a1:fd:32:13:e7:09:e0:53:52:63:e3:bf:70:d9: cb:8f:a9:ef:80:4b:99:9b:da:b4:49:03:48:43:45: 87:81:7a:46:32:e3:dc:7d:a1:81:15:ce:89:58:12: 57:f5:2f:d3:ce:12:ce:20:7c:4d:57:c3:21:42:96: 81:16:d2:12:1d:09:3e:8b:7f:d2:b7:79:81:35:60: 6f:10:95:a4:29:3a:d3:37:ac:94:16:ed:2b:d6:d2: be:76:ce:4d:11:7d:dc:f6:1d:28:85:bc:00:6e:dc: 71:da:3b:07:fa:03:87:18:0f:38:df:98:99:f4:a5: f5:48:96:d3:2a:34:6c:78:94:5b:33:42:93:3a:92: 55:bb:c9:d7:67:90:87:64:03:ee:4a:0d:9e:f3:b9: b5:90:10:56:e5:e3:20:1c:67:ac:d7:8c:5a:a3:4f: 92:ea:55:52:31:8b:b4:ba:83:63:a1:24:fc:43:55: fc:9b:65:bd:27:59:8d:3c:0b:68:c4:c4:63:31:a7: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:37:95:C5:F1:19:22:FA:62:85:62:3F:8D:7B:9A:43:CD:7D:42:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9d:ac:3b:8d:b4:15:49:04:ca:28:a4:14:d6:5d:71:be:d3: 0f:a5:79:de:eb:76:f8:7f:f7:a3:ba:fe:8b:75:d2:d0:fe:78: 67:de:42:1d:2d:26:c0:1b:34:37:db:f8:39:0c:a6:c8:85:5a: 9e:66:f4:6a:b4:01:33:22:95:ab:fa:c1:e2:a7:0e:02:fc:38: 25:e4:41:41:e2:3e:5c:d2:05:b3:09:a9:a9:b7:86:84:f5:2d: 99:e3:b9:7d:ab:3e:b3:c2:9b:e1:fa:a6:34:4b:3a:25:15:50: 04:be:76:8a:0b:47:6f:f6:95:09:75:ce:8b:e4:69:2c:19:6b: 1a:ad:bc:a0:ff:10:a0:82:f5:1a:aa:e6:44:ed:71:de:5a:0b: 17:6f:a2:de:df:e0:a0:86:17:84:89:86:9e:ff:06:3b:94:58: 0e:e0:6d:b4:4b:17:03:49:1c:46:9b:05:19:e7:36:42:47:4f: c9:4d:ca:c2:c0:4d:7a:60:b9:e1:89:c4:fe:93:1d:b5:85:78: 3d:e8:f6:54:5b:c9:3a:be:8e:f5:ca:3a:7a:df:8e:b0:74:76: 58:8c:1f:ca:f0:04:c9:e8:44:0e:2c:13:ce:11:e2:c9:a1:ee: 7f:6f:26:3d:18:c9:5f:de:d6:7b:aa:6d:20:26:54:87:2c:81: 3a:76:30:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQY2MuLMV1CyvuVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MDVhNzFjNGUtNjM5My00MzVkLWEyYjQtMTJmNWZlNzRhMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnqTvATsMhryRhXjaQj+4fjOl3xrvPEezsr8 0jhb7Pw5oARWce68WfV8FMnTTi/981KPltmR2RiU3/xNof0yE+cJ4FNSY+O/cNnL j6nvgEuZm9q0SQNIQ0WHgXpGMuPcfaGBFc6JWBJX9S/TzhLOIHxNV8MhQpaBFtIS HQk+i3/St3mBNWBvEJWkKTrTN6yUFu0r1tK+ds5NEX3c9h0ohbwAbtxx2jsH+gOH GA8435iZ9KX1SJbTKjRseJRbM0KTOpJVu8nXZ5CHZAPuSg2e87m1kBBW5eMgHGes 14xao0+S6lVSMYu0uoNjoST8Q1X8m2W9J1mNPAtoxMRjMadnywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw3lcXxGSL6YoViP417mkPNfULgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMDZjOTEyOGEtOTI4NS0z YWZiLTk0ZTUtMTlhOTZiMGYyYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOdrDuNtBVJBMoopBTWXXG+0w+led7rdvh/96O6/ot10tD+eGfeQh0t JsAbNDfb+DkMpsiFWp5m9Gq0ATMilav6weKnDgL8OCXkQUHiPlzSBbMJqam3hoT1 LZnjuX2rPrPCm+H6pjRLOiUVUAS+dooLR2/2lQl1zovkaSwZaxqtvKD/EKCC9Rqq 5kTtcd5aCxdvot7f4KCGF4SJhp7/BjuUWA7gbbRLFwNJHEabBRnnNkJHT8lNysLA TXpgueGJxP6THbWFeD3o9lRbyTq+jvXKOnrfjrB0dliMH8rwBMnoRA4sE84R4smh 7n9vJj0YyV/e1nuqbSAmVIcsgTp2MEk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:51 2025 by rpki-client